Installing an SSL certificate on Apache

1. Create a private key:

openssl genrsa 2048 > private-key.pem

1. Create a Certificate Signing Request (CSR):

openssl req -new -key private-key.pem -out csr.pem

1. When you get a response with your certificate, you'll need upload them to your server:

scp ./STAR_yourdomain_com/* yourdomain:/home/ubuntu/cert/new-cert

Note: This assumes there is a yourdomain alias in your ~/.ssh/config.

1. Then you'll need to concatenate all the files to create your SSL bundle:

cat STAR_yourdomain_com.crt COMODORSAOrganizationValidationSecureServerCA.crt COMODORSAAddTrustCA.crt AddTrustExternalCARoot.crt > ssl-bundle.crt

1. Configure Apache to work with the new files you created:

<VirtualHost *:443>
  ServerName *.yourdomain.com
  SSLEngine on

  SSLCertificateFile /home/ubuntu/cert/STAR_yourdomain_com.crt
  SSLCertificateKeyFile /home/ubuntu/cert/private-key.pem
  SSLCertificateChainFile /home/ubuntu/cert/ssl-bundle.crt
  SSLCACertificateFile /home/ubuntu/cert/AddTrustExternalCARoot.crt
</VirtualHost>